General
-
Target
fa3b6e257e61791990eb3c99a597ac37_JaffaCakes118
-
Size
5.0MB
-
Sample
240927-mf5plazhmg
-
MD5
fa3b6e257e61791990eb3c99a597ac37
-
SHA1
c1c1fc66810fa18f44c56af4c581b1b6d4b5e1f1
-
SHA256
1ab0b6dd095a065d8433ca65eef7af9402a442bc432ce4b7d167343e935beb82
-
SHA512
82c12a7633d51cc7f1b3e6dbbdb3e7496103daa69f4ddcbf2325996943f509513102f18a81b197285cf811c181c48f0158cd5127d2aa0ec36d8dffc8622de1f9
-
SSDEEP
49152:SnAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhC:+DqPoBhz1aRxcSUDk36SAEdhC
Static task
static1
Behavioral task
behavioral1
Sample
fa3b6e257e61791990eb3c99a597ac37_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fa3b6e257e61791990eb3c99a597ac37_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
fa3b6e257e61791990eb3c99a597ac37_JaffaCakes118
-
Size
5.0MB
-
MD5
fa3b6e257e61791990eb3c99a597ac37
-
SHA1
c1c1fc66810fa18f44c56af4c581b1b6d4b5e1f1
-
SHA256
1ab0b6dd095a065d8433ca65eef7af9402a442bc432ce4b7d167343e935beb82
-
SHA512
82c12a7633d51cc7f1b3e6dbbdb3e7496103daa69f4ddcbf2325996943f509513102f18a81b197285cf811c181c48f0158cd5127d2aa0ec36d8dffc8622de1f9
-
SSDEEP
49152:SnAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhC:+DqPoBhz1aRxcSUDk36SAEdhC
Score10/10-
Contacts a large (3264) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Executes dropped EXE
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Drops file in System32 directory
-